Hello! Nice to meet you guys. I was reading this a...
# support-questions-legacym
mihaiandrei
08/02/2023, 8:22 PMHello! Nice to meet you guys. I was reading this article from 2020 https://supertokens.com/blog/are-you-using-jwts-for-user-sessions-in-the-correct-way and started the demo with react + python and I can say, really great job guys 😄 This is the first time i have such a good experience seeing how it works in 60 seconds. However, I have a question regarding the refresh token. The access token is a JWT. The refresh token is just a random string encrypted and saved in the session in db?
r
rp_st
08/03/2023, 3:46 AMHey @mihaiandrei that is correct.
rp_st
08/03/2023, 3:51 AMAlso, appreciate the kind words 🙂
m
mihaiandrei
08/03/2023, 6:55 AMThank you! And, the refresh token is saved in the db encrypted? Or is it encrypted only in the access_token 😄
r
rp_st
08/03/2023, 6:57 AMit's hashed in the db
m
mihaiandrei
08/03/2023, 7:16 AMThank you
mihaiandrei
08/03/2023, 8:44 AM@rp_st sorry to bother again. In order for the auth flow to work, we need to deploy both backend and frontend to the same domain right?
- by using nginx or something
- by serving frontend from the backend
r
rp_st
08/03/2023, 8:45 AMnot necessarirly on the same domain
rp_st
08/03/2023, 8:45 AMthey can be on different sub domains as well.
m
mihaiandrei
08/03/2023, 8:45 AMOh, because the cookie is "lax" right?
r
rp_st
08/03/2023, 8:45 AMyea
m
mihaiandrei
08/03/2023, 8:46 AMThank you!